CVE-2023-5539 MEDIUM

CVE-2023-5539: Moodle: authenticated remote code execution risk in lesson

Weakness CWE-94 · Code injection

Published November 9, 2023

Last update September 3, 2024

CVSS base score

4.7/10

Attack vector Network

Attack complexity Low

Privileges required High

User interaction None

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

A remote code execution risk was identified in the Lesson activity. By default this was only available to teachers and managers.

Key dates

November 9, 2023 CVE published

September 3, 2024 Record updated

External resources

Related vulnerabilities